last executing test programs: 16m15.217754634s ago: executing program 0 (id=121): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x6dde, &(0x7f00000002c0)={0x0, 0xd612, 0x1, 0x0, 0x28b}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0xce, 0x0, r1}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r3, 0x540b, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$rds(0x15, 0x5, 0x0) 16m14.422678842s ago: executing program 0 (id=124): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x6dde, &(0x7f00000002c0)={0x0, 0xd612, 0x1, 0x0, 0x28b}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0xce, 0x0, r1}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r4, 0x540b, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$rds(0x15, 0x5, 0x0) 16m13.572130371s ago: executing program 0 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) truncate(&(0x7f0000000000)='./file3\x00', 0x80000000) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0, 0x0], 0x2, r6, r7, 0x3, 0x0, 0xfff7ffff, 0x6, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0x0, "fe1d00003413000000000020b42717e47f00"}}) 16m11.905900053s ago: executing program 0 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0xa, 0x1, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0xffffffffffffff5a, 0x10}, 0x4811) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='usbip-vudc.0', 0xc) 16m10.45335042s ago: executing program 0 (id=129): fanotify_init(0x10, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x408c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48000) unshare(0x20000400) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012"], 0x28}}, 0x802) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m9.359572561s ago: executing program 0 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x104, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000240)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x1b, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002102, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) 15m53.268278628s ago: executing program 32 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x104, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000240)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x1b, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002102, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) 11m23.331716931s ago: executing program 3 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1286dd6001044800183aff00000000000000000000000000000001fe80000000000e0000000000000000aa8800907800000000fe8000"/77], 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'vcan0\x00'}) ioctl(r0, 0x3b94, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f00000001c0)=0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x80002, 0x0, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11m21.658580572s ago: executing program 3 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", '\x00', "72392a24199b5903"}, 0x28) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800", 0x2}], 0x1) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x16, 0x800000000004, @tid=r0}, &(0x7f0000000200)) 11m19.173729743s ago: executing program 3 (id=569): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="b5ae4164202bad", 0x7}, {&(0x7f0000000c40)="28f155dcb9497aec74", 0x9}], 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) 11m17.733187717s ago: executing program 3 (id=573): socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$FS_IOC_SETFLAGS(r3, 0xc02063a1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x481, &(0x7f0000000600)="$eJzs3M2PU1UbAPDntjPDy9c7o+IHiIKikWicYQZUlmA0caGJiS5wOXYGghTGMKMRQrS6wKUhcW9cmvAXuNKNUVcmbnVvSIhhA7q65rb3Dm2nrczQWsf+fknpOT23Pefh3NOec8+0AYys/dk/ScSOiPglIiYb2dYD9jfubt24VPnjxqVKEmn6xu9J/bibNy5VikOL520vMrXWx5stX7h4Zr5aXTyf52dWzr47s3zh4rOnz86fWjy1eG7u6NEjh2dfeH7uub7EmbXp5p4Pl/bufuWtK69VTlx5+4erSRF/Sxzv96W+ppduVi4ST/arln+JnU3pZGyIDWFdshMy667x+vifjHLc7rzJePmToTYOGKg0TdMt3YtrKfAflsSwWwAMR/45n0TUKtkauHk9PwquH28sgLK4b+W3RslYlPJjxtvWt/2UrbZO1P78IrtF2/UUAIBB+OZ4476Y+92ef5RaruIfy/eGpiLinoi4NyLui4hdEXF/RDwQEQ9GxENNz+m079OufZNk7fyndG1Dgd2h6xN5Ys38r5j9xVQ5z+2sxz+enDxdXTwUEf+PiIMxviXLz/ao49uXfv6sW9n+pvlfdsvqL+aCeTuujbVdoFuYX5nfaLztrn8csWessbfXGn+yuhOQ9ePuiNizb2N1nH76q73dyv4+/h76sM+UfhnxVGNvsxZt8Uc+909670/O/C+qi4dmirNirR9/uvx6U7Yy2ZS5q/j7IOv/bdG5/3NTSfN+7fL667j866dd1zR3eP5PND8nO/8nkjfr6aLgg/mVlfOzERPJq/njx/LHW+urHzd3+/gs/oMHOsVfqr/HFf8TD0dEdhI/EhGPRsS+vO2PRcTjEXGgR/zfv/jEOxuPf7Cy+BfW1f9dE8Xe9pqi8pnvvq6XFJ011SP+JDr0/5F66mD+SKf3v8nWUyR6tvT83ZzNAAAAsPmUImJHJKXp1XSpND3d+Hv5XbGtVF1aXnnm5NJ75xYa3xGYivFScaVrcvV6aNRm82X91XJEVj6X54vrpYfz68afl7fW89OVperCsIOHEbe9y/jP/FYeduuAgfN9LRhdGx3/aZp+1OemAP8wn/8wuox/GF0dxv/WtnyP3wgANrNOn/8W9jAazP9hdBn/MLqMfxhdxj+MpPyb8GN38gX/gSWy95/h1b7+RJoOqfaJ4ce+mojS0GqPYce+vkSS/5ZGOvC6il+W6ccL1l/ILgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDp/RUAAP//S+LZpQ==") mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r4, &(0x7f0000000280), 0x0, &(0x7f0000000240), 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socket$inet(0x2, 0x3, 0x81) socket$kcm(0xa, 0x1, 0x0) 11m16.635666847s ago: executing program 3 (id=575): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000e00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x80}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xfffffffffffffea8, r3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a31000000000900020009000000000000002c0000000b0a010400000000000000000a0000020900010073797a3100000000"], 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) 11m14.993797084s ago: executing program 3 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000003, 0xcb7}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() r2 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x20042000) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(r5, 0x0, 0x220000, 0x12d) read(r6, &(0x7f00000002c0)=""/10, 0x5b) io_setup(0x6, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x80040, 0x111) read(r7, &(0x7f0000000240)=""/93, 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 11m13.289098178s ago: executing program 33 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000003, 0xcb7}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() r2 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x20042000) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(r5, 0x0, 0x220000, 0x12d) read(r6, &(0x7f00000002c0)=""/10, 0x5b) io_setup(0x6, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x80040, 0x111) read(r7, &(0x7f0000000240)=""/93, 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6m37.817717266s ago: executing program 1 (id=1122): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r5, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="b5ae4164202bad", 0x7}, {&(0x7f0000000c40)="28f155dcb9497aec74", 0x9}], 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) 6m37.543917725s ago: executing program 1 (id=1126): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="b5ae4164202bad", 0x7}, {&(0x7f0000000c40)="28f155dcb9497aec74", 0x9}], 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'macsec0\x00'}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) 6m37.40513989s ago: executing program 1 (id=1129): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="b5ae4164202bad", 0x7}, {&(0x7f0000000c40)="28f155dcb9497aec74", 0x9}], 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) 6m36.377221564s ago: executing program 1 (id=1132): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r5, &(0x7f0000000280)='1', 0x1) 6m34.725262029s ago: executing program 1 (id=1136): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r4, &(0x7f0000000280)='1', 0x1) 6m32.949088067s ago: executing program 1 (id=1140): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x40, 0x2, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0), 0x0, 0xd1, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), 0x0, 0x0, 0x800ed, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4}, 0x94) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500"], 0x17) 6m17.72214416s ago: executing program 34 (id=1140): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x40, 0x2, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0), 0x0, 0xd1, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), 0x0, 0x0, 0x800ed, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4}, 0x94) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r7, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500"], 0x17) 1m23.963622237s ago: executing program 6 (id=1933): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42) read(r3, &(0x7f0000000180), 0x1000) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) openat(0xffffffffffffff9c, 0x0, 0x2e4201, 0x0) 1m22.844617441s ago: executing program 6 (id=1936): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x920, 0x12) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 1m22.271852921s ago: executing program 6 (id=1938): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0xa, 0x300) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffbf00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) fsmount(r4, 0x0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r7) r9 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000dc0)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0c70f5db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb06001b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be97323c8689937a3c4f7b0399de3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x564, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r9}) keyctl$KEYCTL_MOVE(0x1e, r9, r8, r7, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x78) 1m20.742914274s ago: executing program 6 (id=1940): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e0200020007050102000200"], 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r2}, 0x38) clock_nanosleep(0x9, 0x2000000, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000140)={@multicast, @remote, @void, {@llc={0x4, {@snap={0x0, 0x0, "e3"}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(r4, 0x0, 0x0) r5 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x8, 0xd1}, 0x8) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000400)=""/249) shmat(r5, &(0x7f0000ffb000/0x3000)=nil, 0x7000) r6 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f00000010c0)=""/4096) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000000)={0x6, 'veth1_vlan\x00', {}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x4}, 0x3ff8}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {0xfff2}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1ff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xc}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x156}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x14}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x78}}, 0x0) ioctl$NILFS_IOCTL_RESIZE(r3, 0x40086e8b, 0x0) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000003c0)={0x200003, &(0x7f0000000580)=[{0x46, '\x00', @buffer={"464f4e7290118da6b1630b7b72e717517bfe455c0954d0be722a8e9a4b182e94", 0x20}, 0x4ea8}, {0x1c, '\x00', @data=0xfffffffc, 0xffffff85}, {0x2a, '\x00', @data=0x8000, 0x1}]}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, 0x0, 0x0) 1m16.544818919s ago: executing program 6 (id=1949): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 1m15.253985247s ago: executing program 6 (id=1952): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x920, 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, 0x0, 0x0) 59.988202745s ago: executing program 35 (id=1952): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x920, 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, 0x0, 0x0) 9.140898637s ago: executing program 5 (id=2131): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000063c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="50010001000000000000000200000000000000d80000000000000002000000a58f989a6261f808024704", @ANYRESDEC=r7], 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) getdents(r8, 0x0, 0x0) 7.356206919s ago: executing program 5 (id=2136): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x920, 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, 0x0, 0x0) 7.326991744s ago: executing program 4 (id=2137): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="030000000300060000201a80230061cc", 0x10) r1 = socket(0x11, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0xe309b000) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="030000000300060000201a80230061cc", 0x10) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r3, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) keyctl$read(0xb, r3, &(0x7f00000001c0)=""/118, 0x76) close(0x3) umount2(0x0, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208404, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000005000000000000008000000018000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1a"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x10000, @remote, 0x7ff}}, 0x0, 0x0, 0x49, 0x0, "ec35492d39efb71c424b2a8a0f3029a26660f9f279fe406e93916f7c10035ae92b388c323f79635fd736790eef5656638864b80f6b1fcd68699949ed7d77c3a646ad3e6f16a71985261c293550903812"}, 0xd8) syz_emit_ethernet(0x9e, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60000000006806fffe8000000000000000000000000000bbff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0"], 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sync_file_range(r4, 0x3, 0x8001, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 7.012418125s ago: executing program 5 (id=2139): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @remote, 0x6}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x18, 0x0, &(0x7f0000000040)) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2450100140000fb727affa3f9d64600000029907800000000ffffffffb9e28c6a534377fa69774f78dc08ad38829b10638f777d8d26a58288f6513b4485b5653af705955e054433e53b0f94bc663f98deb244dcc384fa7e32b8c4ec45aa8ffede6e170ebe2372b4a1414f9e399c62919b26f6b1b37974bb8923f5d4643792e8adcc7221e07fe40dd3770012a24be8f1f8e526"], 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x25, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x5}]}, 0x10) write(r5, &(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) waitid(0x2, r2, &(0x7f00000000c0), 0x8, &(0x7f0000000200)) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$int_in(r6, 0x5452, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 7.002848097s ago: executing program 4 (id=2140): r0 = socket(0x840000000002, 0x3, 0xff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) recvmsg(0xffffffffffffffff, 0x0, 0x1f21) openat(0xffffffffffffff9c, 0x0, 0x101940, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000ff000000000000000003004a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x20}, 0x2400c804) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") 6.234607394s ago: executing program 2 (id=2141): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42) read(r3, &(0x7f0000000180), 0x1000) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) openat(0xffffffffffffff9c, 0x0, 0x2e4201, 0x0) 6.209715229s ago: executing program 7 (id=2142): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r5, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="b5ae4164202bad", 0x7}, {&(0x7f0000000c40)}], 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) 5.298166174s ago: executing program 5 (id=2143): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r3, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="b5ae4164202bad", 0x7}, {&(0x7f0000000c40)="28f155dcb9497aec74", 0x9}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) 3.96318469s ago: executing program 2 (id=2144): sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x3, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040050) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9443c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) syz_ublk_setup_io_uring(0x26d1, 0x0, 0x0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) ioctl$FE_DISEQC_RESET_OVERLOAD(0xffffffffffffffff, 0x6f3e, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000001c0)='cgroup2\x00', 0x200000, 0x0) io_submit(0x0, 0x3, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x6}]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x5, r5, &(0x7f0000000200), 0x0) 3.9617604s ago: executing program 4 (id=2152): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42) read(r3, &(0x7f0000000180), 0x1000) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) openat(0xffffffffffffff9c, 0x0, 0x2e4201, 0x0) 3.881080046s ago: executing program 7 (id=2145): recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={r7, 0xfffffffd, 0x6, 0x0, 0x2, [0x0], [0x0, 0x2, 0x400, 0x9], [0x0, 0x0, 0xfffffffc, 0x3], [0x1, 0xfffffffffffffffd, 0x8000000000000001]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r10, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x2c, r10, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc75}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8088, &(0x7f00000001c0), 0x2, 0x1108, &(0x7f0000001a40)="$eJzs2b+LE0EUB/DvbOKPbmWvXwQtLOS4I/aSQiGtrRaKXOVVl0qx8I/xz9Gr7I/rtTjQemW9bBIkIpioHHw+EGby9r2ZnfLNBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj5HNJ9qqkGWJVkpK07ensPEk7xG99GFUpeXI0mz86mTye593iQXmalCqXZWkO79xsJs2kOWwe7E3vfpy/fvPqxfHx0cmQnTZnF7s/Sr/3aPfLAgAAwJXXba3+z/sDAAAAv7OziwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9TVq3kzTKqkJGnb09l5P26ou/aP3g8AAADYXkmVZ/Wm+I9rgDX386kuKbmxjHwtfc5B3m+oBwAAAH6pG7rr9e/r5fqqH79XjZd9eR+7nXH29y//L4Z8mSajJAc/LX528fbl8Ctdn5Fvz6cP//KRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDv7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAADgqwAAAP//chDZJQ==") 2.824212608s ago: executing program 2 (id=2146): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r5, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="b5ae4164202bad", 0x7}, {&(0x7f0000000c40)="28f155dcb9497aec74", 0x9}], 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) 2.643338313s ago: executing program 7 (id=2147): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r5, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="b5ae4164202bad", 0x7}, {&(0x7f0000000c40)="28f155dcb9497aec74", 0x9}], 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'macsec0\x00'}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) 2.642291063s ago: executing program 4 (id=2148): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x920, 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, 0x0, 0x0) 2.465129827s ago: executing program 2 (id=2149): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = creat(0x0, 0x175) mknod(&(0x7f00000001c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x20000014) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x757e, 0x0, 0xfffffffe, 0xffffffff}, &(0x7f0000000580)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x29) syz_ublk_add_dev(r9, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r9, r10, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x200, 0x321, 0x0, r0}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x8, 0x1, 0x2f2, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9dfe, 0x200, 0x8000001, 0x278, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb606, 0x4, 0x1, 0x321, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x0, 0xc0}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x2, 0xc81, 0x0, 0x0}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f00000001c0)}, 0x3e8) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000500), 0x2001000, &(0x7f0000000540)=ANY=[@ANYBLOB='si\x00e=8,uid=', @ANYRESHEX=r11, @ANYBLOB=',fsname=/-&(#,\x00']) 2.34836053s ago: executing program 5 (id=2150): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1, 0x2000000, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x11, @dev={0xac, 0x14, 0x14, 0x40}, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@multicast1, 0x4e20, 0x10000, 0x6, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x202201, 0x0) write(r6, &(0x7f0000000200)='offline', 0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0xffffffffffffffb0, 0x0, &(0x7f00000001c0)={0xa, 0x6, 0x8, @remote, 0x10000a92}, 0xfffffebb) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000180)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2.185092311s ago: executing program 7 (id=2151): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)="05", 0x1}], 0x1}, 0x40851) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0xffff, 0x2005, 0x4, 0xc1, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000100), &(0x7f0000000240)='%-5lx \x00'}, 0x20) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000800)=""/230, 0xe6}], 0x1) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000040)=r2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) write(r5, &(0x7f0000000900)='+)1', 0x3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x4}}]}, 0x20}}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 2.050406627s ago: executing program 2 (id=2153): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r1) socket$nl_generic(0x10, 0x3, 0x10) r3 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r5, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ecfff4001000130720000000fedbdf25e0000001000000000000000000000000ac1414bb00000000000000baa1b38b195d09e82e0000000000000400ff4e210002400021000000deb82f1cc20000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000000000000000000000000000000000000000000000020000000000000009000000000000000d00000000000000000000000000000001000080000000004305000000000000040000000000000000000000000000800000000000000000fdffffffffffffff0000000000000000020000002cbd700003350000020000004d000000"], 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r6, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 2.047627357s ago: executing program 4 (id=2161): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r5, &(0x7f0000000280)='1', 0x1) 1.922873471s ago: executing program 7 (id=2154): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r5, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="b5ae4164202bad", 0x7}, {&(0x7f0000000c40)}], 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) 1.578618138s ago: executing program 4 (id=2155): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0xffffffffffffff7a) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x40010, r2, 0x5f34b000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) io_setup(0x4, &(0x7f0000000080)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) r7 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r7, &(0x7f0000000180)={0x8008083, 0x2d, 0x1, 0x3a, 0x1000, 0x2c}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x2) unshare(0x62040200) 4.973249ms ago: executing program 7 (id=2156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, &(0x7f00000001c0)={0x11, 0xf6, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af25, &(0x7f00000003c0)={0x1}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r5, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0701081400c80010"], 0xa) dup3(r6, r7, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, r8, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6}, @void, @val={0xc, 0x99, {0x1, 0x200032}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 270.3µs ago: executing program 2 (id=2157): recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={r7, 0xfffffffd, 0x6, 0x0, 0x2, [0x0], [0x0, 0x2, 0x400, 0x9], [0x0, 0x0, 0xfffffffc, 0x3], [0x1, 0xfffffffffffffffd, 0x8000000000000001]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r10, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x2c, r10, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc75}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8088, &(0x7f00000001c0), 0x2, 0x1108, &(0x7f0000001a40)="$eJzs2b+LE0EUB/DvbOKPbmWvXwQtLOS4I/aSQiGtrRaKXOVVl0qx8I/xz9Gr7I/rtTjQemW9bBIkIpioHHw+EGby9r2ZnfLNBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj5HNJ9qqkGWJVkpK07ensPEk7xG99GFUpeXI0mz86mTye593iQXmalCqXZWkO79xsJs2kOWwe7E3vfpy/fvPqxfHx0cmQnTZnF7s/Sr/3aPfLAgAAwJXXba3+z/sDAAAAv7OziwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9TVq3kzTKqkJGnb09l5P26ou/aP3g8AAADYXkmVZ/Wm+I9rgDX386kuKbmxjHwtfc5B3m+oBwAAAH6pG7rr9e/r5fqqH79XjZd9eR+7nXH29y//L4Z8mSajJAc/LX528fbl8Ctdn5Fvz6cP//KRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDv7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAADgqwAAAP//chDZJQ==") 0s ago: executing program 5 (id=2158): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r5, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="b5ae4164202bad", 0x7}, {&(0x7f0000000c40)="28f155dcb9497aec74", 0x9}], 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) kernel console output (not intermixed with test programs): : New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 520.653933][ T789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.602707][ T789] usb 6-1: Product: syz [ 522.607010][ T789] usb 6-1: Manufacturer: syz [ 522.611618][ T789] usb 6-1: SerialNumber: syz [ 522.732155][ T9379] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 523.648841][ T789] usb 6-1: can't set config #155, error -71 [ 523.723637][ T789] usb 6-1: USB disconnect, device number 2 [ 524.266938][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.670'. [ 524.296082][ T9403] macsec0: entered promiscuous mode [ 525.168636][ T971] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 525.587514][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 525.758615][ T971] usb 5-1: unable to get BOS descriptor or descriptor too short [ 526.048291][ T971] usb 5-1: config 7 has an invalid descriptor of length 106, skipping remainder of the config [ 526.339904][ T971] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 526.607540][ T971] usb 5-1: string descriptor 0 read error: -22 [ 526.768796][ T971] usb 5-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=29.5c [ 526.832939][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 527.693512][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.183942][ T971] usb 5-1: can't set config #7, error -71 [ 528.222443][ T971] usb 5-1: USB disconnect, device number 4 [ 528.300218][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 528.630498][ T9416] xt_hashlimit: max too large, truncated to 1048576 [ 529.958803][ T9439] loop4: detected capacity change from 0 to 128 [ 531.577972][ T9452] netlink: 168 bytes leftover after parsing attributes in process `syz.2.675'. [ 534.385840][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 534.846727][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 535.846465][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'. [ 537.003606][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 538.090012][ T9502] netlink: 14 bytes leftover after parsing attributes in process `syz.4.686'. [ 543.076306][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 544.052668][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.693'. [ 545.222747][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.694'. [ 547.274078][ T9573] block device autoloading is deprecated and will be removed. [ 547.286758][ T9573] syz.2.697: attempt to access beyond end of device [ 547.286758][ T9573] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 549.369204][ T9602] netlink: 36 bytes leftover after parsing attributes in process `syz.4.699'. [ 553.192853][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.706'. [ 553.610954][ T9642] loop5: detected capacity change from 0 to 512 [ 553.831593][ T9642] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.707: corrupted in-inode xattr: invalid ea_ino [ 553.974111][ T9642] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.707: couldn't read orphan inode 15 (err -117) [ 554.041851][ T9642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.002795][ T8858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.946585][ T9673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.705'. [ 558.687695][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 560.294474][ T9717] bridge0: port 3(syz_tun) entered blocking state [ 560.302661][ T9717] bridge0: port 3(syz_tun) entered disabled state [ 560.311253][ T9717] syz_tun: entered allmulticast mode [ 560.358907][ T9717] syz_tun: entered promiscuous mode [ 560.368766][ T9717] bridge0: port 3(syz_tun) entered blocking state [ 560.375680][ T9717] bridge0: port 3(syz_tun) entered forwarding state [ 563.369525][ T9768] loop5: detected capacity change from 0 to 128 [ 563.480229][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.486800][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.224530][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.725'. [ 564.945105][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 565.194925][ T6878] kworker/u4:14: attempt to access beyond end of device [ 565.194925][ T6878] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 566.064175][ T9787] kAFS: unable to lookup cell '.' [ 566.154260][ T9792] loop5: detected capacity change from 0 to 4096 [ 566.429558][ T9792] ntfs3: loop5: ino=3, mi_enum_attr [ 566.623400][ T9802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 567.758298][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 568.553443][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.728'. [ 569.678018][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 569.880107][ T9832] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 570.048121][ T9832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.739'. [ 570.633932][ T5789] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 571.668088][ T9853] Config c/1 of g1 needs at least one function. [ 571.675124][ T9853] udc dummy_udc.0: failed to start g1: -22 [ 571.681698][ T9853] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 571.692694][ T9853] UDC core: g1: couldn't find an available UDC or it's busy [ 572.024186][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 573.245507][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 573.725146][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.748'. [ 575.903489][ T9887] lo speed is unknown, defaulting to 1000 [ 576.387696][ T9893] siw: device registration error -23 [ 578.656491][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 579.973650][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 580.190400][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 581.488503][ T2182] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 582.223884][ T2182] usb 3-1: Using ep0 maxpacket: 16 [ 582.240097][ T2182] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 582.263551][ T2182] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.289803][ T2182] usb 3-1: config 0 has no interface number 0 [ 582.338736][ T2182] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 582.501727][ T2182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.530322][ T2182] usb 3-1: Product: syz [ 582.551422][ T2182] usb 3-1: Manufacturer: syz [ 582.562452][ T2182] usb 3-1: SerialNumber: syz [ 582.585504][ T2182] usb 3-1: config 0 descriptor?? [ 582.609539][ T2182] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 582.633227][ T2182] usb 3-1: No valid video chain found. [ 584.582659][ T2182] IPVS: starting estimator thread 0... [ 584.684050][ T9985] IPVS: using max 18 ests per chain, 43200 per kthread [ 585.446429][ T5852] usb 3-1: USB disconnect, device number 3 [ 587.093040][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.771'. [ 588.414841][T10030] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 589.397322][T10040] loop4: detected capacity change from 0 to 512 [ 589.433153][T10040] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.775: corrupted in-inode xattr: invalid ea_ino [ 589.827825][T10040] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.775: couldn't read orphan inode 15 (err -117) [ 589.841208][T10040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.056934][ T5859] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 590.265194][ T5859] usb 6-1: Using ep0 maxpacket: 16 [ 590.296838][ T5859] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 590.342212][ T5859] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.393487][ T5859] usb 6-1: config 0 has no interface number 0 [ 590.455848][ T5859] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 590.488781][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.514655][ T5859] usb 6-1: Product: syz [ 590.566480][ T5859] usb 6-1: Manufacturer: syz [ 590.625739][ T5859] usb 6-1: SerialNumber: syz [ 590.666093][ T5859] usb 6-1: config 0 descriptor?? [ 590.737914][ T5859] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 590.784382][ T5859] usb 6-1: No valid video chain found. [ 592.239454][ T5824] IPVS: starting estimator thread 0... [ 592.374447][T10080] IPVS: using max 17 ests per chain, 40800 per kthread [ 593.040508][ T6574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.099662][T10083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.782'. [ 593.177887][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 593.803914][ T5852] usb 6-1: USB disconnect, device number 3 [ 595.711771][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 596.922959][T10115] lo speed is unknown, defaulting to 1000 [ 597.238826][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.792'. [ 597.254927][T10122] loop4: detected capacity change from 0 to 512 [ 597.562766][T10122] EXT4-fs (loop4): Test dummy encryption mode enabled [ 597.580049][T10122] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 597.597964][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'. [ 597.638608][T10122] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.790: bad orphan inode 131083 [ 597.679858][T10122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.794853][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 598.250508][T10146] ip_tables: iptables: counters copy to user failed while replacing table [ 598.263693][T10146] ip_tables: iptables: counters copy to user failed while replacing table [ 598.838826][T10122] fscrypt (loop4): Error allocating 'xts(aes)' transform: -4 [ 598.925899][T10145] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.378089][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.801'. [ 602.441754][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 602.597612][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'. [ 602.677788][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'. [ 603.936075][T10205] loop5: detected capacity change from 0 to 512 [ 603.963048][T10205] EXT4-fs (loop5): Test dummy encryption mode enabled [ 603.990472][T10205] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 604.068648][T10205] EXT4-fs error (device loop5): ext4_orphan_get:1434: comm syz.5.809: bad orphan inode 131083 [ 604.081815][T10205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.154959][T10205] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 604.938598][T10222] ip_tables: iptables: counters copy to user failed while replacing table [ 604.966654][T10222] ip_tables: iptables: counters copy to user failed while replacing table [ 605.643629][T10221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.743340][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 607.063753][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.815'. [ 607.123392][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 609.831636][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.825'. [ 612.016289][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'. [ 616.505970][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.847'. [ 616.575078][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 618.545675][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'. [ 622.688228][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 623.006729][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 624.857413][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.865437][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.288020][ T5852] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 628.134280][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 628.521612][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 629.619408][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.871'. [ 630.948747][ T5852] usb 3-1: unable to get BOS descriptor or descriptor too short [ 630.970374][ T5852] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 631.003777][ T5852] usb 3-1: can't read configurations, error -71 [ 631.996855][T10487] xt_CT: No such helper "pptp" [ 633.687104][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.882'. [ 634.016677][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 636.245220][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.889'. [ 637.454880][T10547] CIFS: Attempting to mount //127.0.0.1/share [ 637.741595][T10547] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 637.974762][T10547] CIFS: VFS: cifs_mount failed w/return code = -112 [ 641.252680][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 643.169618][T10622] ip_tables: iptables: counters copy to user failed while replacing table [ 643.198249][T10622] ip_tables: iptables: counters copy to user failed while replacing table [ 643.890996][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.903'. [ 649.787952][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'. [ 650.822072][T10698] CIFS: Attempting to mount //127.0.0.1/share [ 651.904081][T10698] CIFS: VFS: cifs_mount failed w/return code = -112 [ 657.150108][T10746] ip_tables: iptables: counters copy to user failed while replacing table [ 657.161056][T10746] ip_tables: iptables: counters copy to user failed while replacing table [ 659.457323][T10766] siw: device registration error -23 [ 665.019362][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 670.521896][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 673.836013][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.962'. [ 673.970148][T10936] 9pnet_fd: Insufficient options for proto=fd [ 674.684995][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.962'. [ 678.665823][T10961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.721793][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.974'. [ 680.733248][T10978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.973'. [ 680.852224][T10978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.973'. [ 680.886254][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.975'. [ 681.018998][T10978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.973'. [ 683.156816][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'. [ 684.537831][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 684.731124][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.984'. [ 685.928076][T11038] fuse: Bad value for 'fd' [ 686.199585][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 686.345301][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.402211][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.714179][T11051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.988'. [ 686.714235][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.996'. [ 687.227635][T11060] lo: entered allmulticast mode [ 687.233291][T11060] tunl0: entered allmulticast mode [ 687.400958][T11060] gre0: entered allmulticast mode [ 687.406458][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 687.429436][T11060] gretap0: entered allmulticast mode [ 687.456785][T11060] erspan0: entered allmulticast mode [ 687.462924][T11060] ip_vti0: entered allmulticast mode [ 687.477990][T11060] ip6_vti0: entered allmulticast mode [ 687.487753][T11060] sit0: entered allmulticast mode [ 687.495062][T11060] ip6tnl0: entered allmulticast mode [ 687.501281][T11060] ip6gre0: entered allmulticast mode [ 687.512641][T11060] syz_tun: entered allmulticast mode [ 687.519233][T11060] ip6gretap0: entered allmulticast mode [ 687.537769][T11060] bridge0: entered allmulticast mode [ 687.548064][T11060] bond0: entered allmulticast mode [ 687.553404][T11060] bond_slave_0: entered allmulticast mode [ 687.559466][T11060] bond_slave_1: entered allmulticast mode [ 687.572244][T11060] team0: entered allmulticast mode [ 687.577704][T11060] team_slave_0: entered allmulticast mode [ 687.584325][T11060] team_slave_1: entered allmulticast mode [ 687.593301][T11060] dummy0: entered allmulticast mode [ 687.602835][T11060] nlmon0: entered allmulticast mode [ 687.612684][T11060] caif0: entered allmulticast mode [ 687.619697][T11060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 690.346093][T11088] lo speed is unknown, defaulting to 1000 [ 695.054642][T11124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1007'. [ 695.306770][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'. [ 696.102927][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'. [ 696.125645][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1009'. [ 699.600479][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 700.426097][T11164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1018'. [ 701.582536][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 703.135002][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'. [ 704.267906][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 706.346333][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1033'. [ 707.615440][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 707.760142][T11234] lo: entered allmulticast mode [ 707.766103][T11234] tunl0: entered allmulticast mode [ 707.772131][T11234] gre0: entered allmulticast mode [ 707.778791][T11234] gretap0: entered allmulticast mode [ 707.784901][T11234] erspan0: entered allmulticast mode [ 707.791035][T11234] ip_vti0: entered allmulticast mode [ 707.797356][T11234] ip6_vti0: entered allmulticast mode [ 707.816874][T11234] sit0: entered allmulticast mode [ 707.823288][T11234] ip6tnl0: entered allmulticast mode [ 707.891728][T11234] ip6gre0: entered allmulticast mode [ 707.898772][T11234] syz_tun: entered allmulticast mode [ 707.904911][T11234] ip6gretap0: entered allmulticast mode [ 707.911560][T11234] bridge0: entered allmulticast mode [ 707.920926][T11234] vcan0: entered allmulticast mode [ 707.927070][T11234] bond0: entered allmulticast mode [ 707.932344][T11234] bond_slave_0: entered allmulticast mode [ 707.939373][T11234] bond_slave_1: entered allmulticast mode [ 708.164398][T11234] team0: entered allmulticast mode [ 709.614133][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1036'. [ 709.723183][T11234] team_slave_0: entered allmulticast mode [ 709.763791][T11234] team_slave_1: entered allmulticast mode [ 709.879418][T11234] dummy0: entered allmulticast mode [ 709.904879][T11234] nlmon0: entered allmulticast mode [ 710.034767][T11234] caif0: entered allmulticast mode [ 710.039948][T11234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.085687][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 710.131994][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 711.365569][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'. [ 712.008316][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 712.201197][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1054'. [ 713.008549][T11275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1050'. [ 714.554594][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 714.763396][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1056'. [ 715.612868][T11302] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1057'. [ 718.260770][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1063'. [ 718.318541][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 718.349528][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 719.894307][T11347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1071'. [ 720.830946][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1072'. [ 720.931119][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1075'. [ 721.490251][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 722.809369][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 722.879269][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'. [ 723.818289][T11391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1083'. [ 724.019749][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1085'. [ 724.088194][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 726.770435][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1094'. [ 726.802072][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 726.988522][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1087'. [ 727.027142][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 727.217812][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 730.011304][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1104'. [ 730.146878][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1107'. [ 730.169020][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 730.391449][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1108'. [ 730.427356][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 731.394964][T11478] overlayfs: failed to clone upperpath [ 731.423111][T11478] netlink: 'syz.5.1111': attribute type 1 has an invalid length. [ 731.431102][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1111'. [ 731.455412][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1111'. [ 731.680637][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 733.311793][T11491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 734.098722][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 735.362664][T11512] __nla_validate_parse: 2 callbacks suppressed [ 735.362712][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 735.406603][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1124'. [ 735.470942][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 735.584872][T11523] lo: entered allmulticast mode [ 735.590740][T11523] tunl0: entered allmulticast mode [ 735.601566][T11523] gre0: entered allmulticast mode [ 735.609305][T11523] gretap0: entered allmulticast mode [ 735.619828][T11523] erspan0: entered allmulticast mode [ 735.630665][T11523] ip_vti0: entered allmulticast mode [ 735.639107][T11523] ip6_vti0: entered allmulticast mode [ 735.657705][T11523] sit0: entered allmulticast mode [ 735.678286][T11523] ip6tnl0: entered allmulticast mode [ 735.700401][T11523] ip6gre0: entered allmulticast mode [ 735.715766][T11523] syz_tun: left promiscuous mode [ 735.737946][T11523] bridge0: port 3(syz_tun) entered disabled state [ 735.748562][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'. [ 735.763032][T11523] ip6gretap0: entered allmulticast mode [ 735.781263][T11523] bridge0: entered allmulticast mode [ 735.840351][T11523] vcan0: entered allmulticast mode [ 735.849241][T11523] bond0: entered allmulticast mode [ 735.855878][T11523] bond_slave_0: entered allmulticast mode [ 735.868368][T11523] bond_slave_1: entered allmulticast mode [ 735.876162][T11523] team0: entered allmulticast mode [ 735.881487][T11523] team_slave_0: entered allmulticast mode [ 735.890473][T11523] team_slave_1: entered allmulticast mode [ 735.898510][T11523] nlmon0: entered allmulticast mode [ 735.905135][T11523] caif0: entered allmulticast mode [ 735.910321][T11523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 736.341116][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 736.661240][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 736.869110][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 738.231084][T11551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'. [ 739.155421][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 740.009761][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 740.400729][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1142'. [ 740.440877][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 740.456903][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1141'. [ 740.470370][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 740.487987][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xcf18 instead [ 740.510278][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x85ca instead [ 740.511487][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 740.545361][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 740.555883][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 740.556635][T11575] overlayfs: failed to clone upperpath [ 740.566348][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 740.566411][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 740.566444][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 740.566477][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 740.566493][T11573] jffs2: Further such events for this erase block will not be printed [ 740.643914][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 740.662636][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 740.676788][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xcf18 instead [ 740.713327][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x85ca instead [ 740.724542][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 740.736908][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 740.749705][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 741.636519][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 741.654992][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1145'. [ 741.680859][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 741.694435][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 741.706100][T11573] jffs2: Further such events for this erase block will not be printed [ 741.893989][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 743.123748][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 743.154520][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xcf18 instead [ 743.184937][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x85ca instead [ 743.207348][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 743.223903][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 743.240994][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xcf18 instead [ 743.260596][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x85ca instead [ 743.277529][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 743.290957][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 743.306511][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xcf18 instead [ 743.322737][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x85ca instead [ 743.336570][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 743.359248][T11594] xt_hashlimit: max too large, truncated to 1048576 [ 743.378656][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 743.403825][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xcf18 instead [ 743.414901][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x85ca instead [ 743.441929][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 743.458958][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 743.471660][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xcf18 instead [ 743.497923][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x85ca instead [ 743.528336][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 743.540635][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1151'. [ 743.562095][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 743.573302][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xcf18 instead [ 743.597910][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 743.632651][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x85ca instead [ 743.652900][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 743.697474][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 743.725645][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xcf18 instead [ 743.758594][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x85ca instead [ 743.784776][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1154'. [ 743.827800][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 743.878933][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 743.912238][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xcf18 instead [ 743.956506][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x85ca instead [ 743.983010][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 743.995399][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 744.009820][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xcf18 instead [ 744.028622][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x85ca instead [ 744.039733][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 744.189770][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 744.231544][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1156'. [ 744.771355][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xcf18 instead [ 744.791992][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x85ca instead [ 744.806798][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 744.820769][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 744.833235][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xcf18 instead [ 745.036722][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x85ca instead [ 745.056277][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 745.071306][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 745.082011][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xcf18 instead [ 746.327797][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x85ca instead [ 746.365136][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 746.380799][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 746.599743][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xcf18 instead [ 747.618458][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x85ca instead [ 747.632009][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 747.738264][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.744983][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.760329][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1160'. [ 747.774019][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 747.785638][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xcf18 instead [ 747.796255][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x85ca instead [ 747.812525][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 747.928312][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 747.957050][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xcf18 instead [ 748.102540][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x85ca instead [ 748.119716][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 749.470685][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 749.489621][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'. [ 749.509105][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xcf18 instead [ 749.535539][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x85ca instead [ 749.561006][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 749.591672][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 749.603064][T11652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.633845][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 749.666370][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xcf18 instead [ 749.909052][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x85ca instead [ 749.920211][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 749.930755][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 751.083926][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xcf18 instead [ 751.112506][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x85ca instead [ 751.133787][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 751.159495][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 751.282073][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xcf18 instead [ 751.321180][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x85ca instead [ 752.525539][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 752.542905][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 752.569400][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xcf18 instead [ 752.585444][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x85ca instead [ 752.596290][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 752.607223][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 752.619822][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xcf18 instead [ 752.698995][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x85ca instead [ 752.872303][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 752.893197][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 752.912046][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xcf18 instead [ 752.923154][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x85ca instead [ 752.951165][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 752.963583][T11676] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1171'. [ 753.003813][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 753.022153][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xcf18 instead [ 753.091361][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x85ca instead [ 753.118270][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 753.160484][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 753.216127][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 753.231387][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xcf18 instead [ 753.301898][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x85ca instead [ 753.340460][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 753.356450][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 753.374066][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 753.402222][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 753.431703][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xcf18 instead [ 753.442595][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x85ca instead [ 753.493866][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 753.507727][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 753.518319][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xcf18 instead [ 753.540104][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x85ca instead [ 753.566131][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 753.604884][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 753.622665][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 753.647835][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xcf18 instead [ 753.652111][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 753.683960][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x85ca instead [ 753.725326][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 753.753729][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 753.777050][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xcf18 instead [ 755.240215][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x85ca instead [ 755.333880][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 755.360057][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 755.397320][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xcf18 instead [ 755.437301][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x85ca instead [ 755.453138][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 755.475888][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 755.498886][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 755.514684][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xcf18 instead [ 755.528855][T11573] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x85ca instead [ 755.540721][T11573] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 755.555402][T11573] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 756.081516][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1185'. [ 756.449817][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 756.546540][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1187'. [ 756.570314][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 756.590907][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 756.606142][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 756.619478][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 756.628212][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 756.646408][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 756.682301][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 756.830161][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 756.845506][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 756.853603][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 756.870001][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 756.879014][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 757.111227][ T8955] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.363611][ T8955] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.449943][T11724] lo speed is unknown, defaulting to 1000 [ 757.571739][ T8955] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.866558][ T8955] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.835560][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 759.080463][ T5789] Bluetooth: hci2: command tx timeout [ 759.329035][T11724] chnl_net:caif_netlink_parms(): no params data found [ 759.417289][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'. [ 759.479150][T11724] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.489169][T11724] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.496637][T11724] bridge_slave_0: entered allmulticast mode [ 759.586003][T11724] bridge_slave_0: entered promiscuous mode [ 759.851523][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 759.891301][T11724] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.906777][T11724] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.962465][T11724] bridge_slave_1: entered allmulticast mode [ 760.015334][T11724] bridge_slave_1: entered promiscuous mode [ 760.033606][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1197'. [ 760.390705][T11724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.421520][T11724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.014567][T11724] team0: Port device team_slave_0 added [ 761.054030][T11724] team0: Port device team_slave_1 added [ 761.115034][ T5789] Bluetooth: hci2: command tx timeout [ 761.370907][T11724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.380483][T11724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.412319][T11724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.471591][T11724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.479313][T11724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.511213][T11724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.730028][T11724] hsr_slave_0: entered promiscuous mode [ 761.741915][T11724] hsr_slave_1: entered promiscuous mode [ 761.754676][T11724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 761.762281][T11724] Cannot create hsr debugfs directory [ 762.138798][T11724] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 762.159660][T11724] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 762.188049][ T8955] hsr_slave_0: left promiscuous mode [ 762.197151][ T8955] hsr_slave_1: left promiscuous mode [ 762.203337][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.211514][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.222461][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.230326][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.238642][ T8955] bridge_slave_1: left allmulticast mode [ 762.244965][ T8955] bridge_slave_1: left promiscuous mode [ 762.250725][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.260280][ T8955] bridge_slave_0: left allmulticast mode [ 762.266276][ T8955] bridge_slave_0: left promiscuous mode [ 762.272018][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.302307][ T8955] bridge0: left promiscuous mode [ 762.308293][ T8955] veth1_vlan: left promiscuous mode [ 762.316384][ T8955] veth0_vlan: left promiscuous mode [ 762.850797][ T8955] team_slave_1 (unregistering): left allmulticast mode [ 762.869829][ T8955] team0 (unregistering): Port device team_slave_1 removed [ 762.928160][ T8955] team_slave_0 (unregistering): left allmulticast mode [ 762.938732][ T8955] team0 (unregistering): Port device team_slave_0 removed [ 762.985645][ T8955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.996134][ T8955] bond_slave_1 (unregistering): left allmulticast mode [ 763.047203][ T8955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.056364][ T8955] bond_slave_0 (unregistering): left allmulticast mode [ 763.183985][ T5789] Bluetooth: hci2: command tx timeout [ 763.420212][ T8955] bond0 (unregistering): Released all slaves [ 763.520648][T11724] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 763.552252][T11724] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 763.757545][T11724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.779500][T11724] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.793024][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.800228][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.824621][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.831819][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.151636][T11724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.515677][T11724] veth0_vlan: entered promiscuous mode [ 764.535349][T11724] veth1_vlan: entered promiscuous mode [ 764.597949][T11724] veth0_macvtap: entered promiscuous mode [ 764.613427][T11724] veth1_macvtap: entered promiscuous mode [ 764.640635][T11724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.651598][T11724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.661904][T11724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.673535][T11724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.684805][T11724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.697051][T11724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.710661][T11724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.726261][T11724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.736957][T11724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.747947][T11724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.759441][T11724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.769635][T11724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.780779][T11724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.792536][T11724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.809091][T11724] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.820784][T11724] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.833522][T11724] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.844557][T11724] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.978236][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.991237][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.023482][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.032417][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.329678][ T5789] Bluetooth: hci2: command tx timeout [ 766.638633][T11866] lo: entered allmulticast mode [ 766.668277][T11866] tunl0: entered allmulticast mode [ 766.703393][T11866] gre0: entered allmulticast mode [ 766.726581][T11866] gretap0: entered allmulticast mode [ 766.732652][T11866] erspan0: entered allmulticast mode [ 766.755063][T11866] ip_vti0: entered allmulticast mode [ 766.761300][T11866] ip6_vti0: entered allmulticast mode [ 766.786227][T11866] sit0: entered allmulticast mode [ 766.792435][T11866] ip6tnl0: entered allmulticast mode [ 766.815038][T11866] ip6gre0: entered allmulticast mode [ 766.821327][T11866] syz_tun: entered allmulticast mode [ 766.858054][T11866] ip6gretap0: entered allmulticast mode [ 766.862174][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1200'. [ 766.884633][T11866] bridge0: entered allmulticast mode [ 766.900985][T11866] vcan0: entered allmulticast mode [ 766.914767][T11866] bond0: entered allmulticast mode [ 766.919955][T11866] bond_slave_0: entered allmulticast mode [ 766.973707][T11866] bond_slave_1: entered allmulticast mode [ 766.980609][T11866] team0: entered allmulticast mode [ 767.004286][T11866] team_slave_0: entered allmulticast mode [ 767.010094][T11866] team_slave_1: entered allmulticast mode [ 767.035513][T11866] dummy0: entered allmulticast mode [ 767.050972][T11866] nlmon0: entered allmulticast mode [ 767.076349][T11866] caif0: entered allmulticast mode [ 767.097865][T11866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 768.233894][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1204'. [ 768.272763][T11886] macsec0: entered promiscuous mode [ 768.603112][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1205'. [ 772.825862][T11932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 773.479609][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'. [ 773.511352][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'. [ 774.726714][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 776.269459][T11948] bridge0: port 3(syz_tun) entered blocking state [ 776.294294][T11948] bridge0: port 3(syz_tun) entered disabled state [ 776.359705][T11948] syz_tun: entered promiscuous mode [ 776.384542][T11948] bridge0: port 3(syz_tun) entered blocking state [ 776.391339][T11948] bridge0: port 3(syz_tun) entered forwarding state [ 776.452404][T11954] netlink: 'syz.2.1222': attribute type 9 has an invalid length. [ 778.860568][T11994] loop6: detected capacity change from 0 to 128 [ 779.916506][ T8652] kworker/u4:15: attempt to access beyond end of device [ 779.916506][ T8652] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 780.420199][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1234'. [ 781.621237][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'. [ 782.979284][T12036] 9pnet_fd: Insufficient options for proto=fd [ 783.093207][T12037] loop6: detected capacity change from 0 to 512 [ 783.231527][T12037] EXT4-fs error (device loop6): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 783.250084][T12037] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #11: comm syz.6.1237: corrupted inode contents [ 783.267322][T12037] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #11: comm syz.6.1237: mark_inode_dirty error [ 783.282222][T12037] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1237: invalid indirect mapped block 1 (level 1) [ 783.300982][T12037] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #11: comm syz.6.1237: corrupted inode contents [ 783.324025][T12037] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 783.336537][T12037] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #11: comm syz.6.1237: corrupted inode contents [ 783.351008][T12037] EXT4-fs error (device loop6): ext4_truncate:4314: inode #11: comm syz.6.1237: mark_inode_dirty error [ 783.406231][T12037] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 783.434352][T12037] EXT4-fs (loop6): 1 truncate cleaned up [ 783.442005][T12037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.523098][T12042] EXT4-fs error (device loop6): ext4_find_dest_de:2117: inode #2: block 13: comm syz.6.1237: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 785.320850][T11724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.529458][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1243'. [ 787.823333][T12086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.050414][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 789.884131][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1251'. [ 791.371886][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 791.506678][T12103] Set syz1 is full, maxelem 6117 reached [ 793.184321][T12141] overlayfs: missing 'lowerdir' [ 793.206316][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1255'. [ 793.236817][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 793.742234][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'. [ 794.749518][ T42] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 795.140820][ T42] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 795.167262][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'. [ 795.287416][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1269'. [ 795.329037][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 795.563909][T12197] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 795.616683][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 795.641782][T12180] ceph: No mds server is up or the cluster is laggy [ 795.665890][ T5844] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 795.682949][T12204] Cannot find del_set index 4 as target [ 795.749426][T12206] overlayfs: conflicting options: nfs_export=on,index=off [ 796.253325][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1278'. [ 797.016557][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1279'. [ 797.095472][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 797.362502][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1280'. [ 799.195302][T12254] overlayfs: overlapping lowerdir path [ 800.251021][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1289'. [ 800.358811][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1290'. [ 801.775084][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 801.892255][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1294'. [ 802.671423][T12308] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6574] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12308] [ 804.017872][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1300'. [ 804.442744][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1303'. [ 805.106958][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1305'. [ 808.104250][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'. [ 808.296872][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1311'. [ 809.181336][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.187998][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.208856][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 811.663866][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1317'. [ 811.861756][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 812.697318][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1320'. [ 812.853265][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 813.063186][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'. [ 815.989759][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 816.260377][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 817.023503][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 818.797355][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1335'. [ 819.082658][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1338'. [ 819.605804][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1340'. [ 820.986594][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 821.279335][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 822.651771][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 823.609153][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1351'. [ 827.329526][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'. [ 827.664163][T12594] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 827.773391][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1355'. [ 829.475325][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 831.501329][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1363'. [ 832.138966][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1366'. [ 833.399516][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 836.302201][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1374'. [ 836.373438][T12716] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 836.446463][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 836.717560][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 837.326389][T12723] Cannot find add_set index 0 as target [ 837.392350][T12730] overlayfs: conflicting options: nfs_export=on,index=off [ 840.376536][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 840.934979][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1389'. [ 841.804419][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'. [ 845.324771][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'. [ 845.365233][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 845.766242][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 845.857061][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1402'. [ 848.185862][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1409'. [ 848.911988][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 849.087512][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1412'. [ 853.233930][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1420'. [ 853.342939][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1421'. [ 853.746598][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1425'. [ 854.810079][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'. [ 855.852770][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'. [ 855.922837][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1432'. [ 856.956729][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1439'. [ 858.097265][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 858.831165][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 859.097157][T12979] syz.6.1447: attempt to access beyond end of device [ 859.097157][T12979] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 859.543488][T12985] loop6: detected capacity change from 0 to 512 [ 859.580185][T12985] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.1450: corrupted in-inode xattr: invalid ea_ino [ 859.663373][T12985] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1450: couldn't read orphan inode 15 (err -117) [ 859.702216][T12985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.539171][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 860.573326][T11724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.596443][T12994] bridge0: port 3(syz_tun) entered blocking state [ 860.603268][T12994] bridge0: port 3(syz_tun) entered disabled state [ 860.645329][T12994] syz_tun: entered promiscuous mode [ 860.673493][T12994] bridge0: port 3(syz_tun) entered blocking state [ 860.680115][T12994] bridge0: port 3(syz_tun) entered forwarding state [ 860.731031][T12996] netlink: 'syz.5.1452': attribute type 9 has an invalid length. [ 860.741812][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1453'. [ 863.329125][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 863.742110][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 866.586279][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1475'. [ 867.300008][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1478'. [ 867.862403][T13090] syz.6.1480: attempt to access beyond end of device [ 867.862403][T13090] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 869.353047][T13107] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1482'. [ 869.996693][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'. [ 870.620835][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.627664][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.873857][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 870.981802][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1488'. [ 874.998891][T13144] lo speed is unknown, defaulting to 1000 [ 876.226985][T13124] libceph: connect (1)[c::]:6789 error -101 [ 876.249811][T13124] libceph: mon0 (1)[c::]:6789 connect error [ 876.279447][T13167] ceph: No mds server is up or the cluster is laggy [ 876.351117][T13176] syz.6.1501: attempt to access beyond end of device [ 876.351117][T13176] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 879.879222][T13204] netlink: 'syz.6.1511': attribute type 32 has an invalid length. [ 879.912346][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1511'. [ 880.115563][T13204] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 880.902051][T13217] geneve0: entered promiscuous mode [ 881.171469][T13222] IPVS: Unknown mcast interface: vcan0 [ 882.341921][T13234] bridge0: port 4(ip6gretap0) entered blocking state [ 882.349178][T13234] bridge0: port 4(ip6gretap0) entered disabled state [ 882.373201][T13234] ip6gretap0: entered promiscuous mode [ 882.380882][T13234] bridge0: port 4(ip6gretap0) entered blocking state [ 882.387724][T13234] bridge0: port 4(ip6gretap0) entered forwarding state [ 882.934356][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 882.989337][T13233] lo speed is unknown, defaulting to 1000 [ 883.156442][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1521'. [ 883.299810][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1520'. [ 885.268770][T13263] syz.6.1524: attempt to access beyond end of device [ 885.268770][T13263] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 885.882169][T13267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1525'. [ 886.678077][T13282] IPVS: Unknown mcast interface: vcan0 [ 887.543896][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1530'. [ 887.700131][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 887.828037][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1532'. [ 887.837410][T13296] bridge_slave_1: left allmulticast mode [ 887.843430][T13296] bridge_slave_1: left promiscuous mode [ 887.851123][T13296] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.872109][T13296] bridge_slave_0: left allmulticast mode [ 887.877955][T13296] bridge_slave_0: left promiscuous mode [ 887.884367][T13296] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.664702][T13303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1535'. [ 889.185338][ T5852] IPVS: starting estimator thread 0... [ 889.484815][T13304] IPVS: using max 25 ests per chain, 60000 per kthread [ 889.781972][T13314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 890.461883][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1536'. [ 891.215076][T13332] IPVS: Error connecting to the multicast addr [ 891.994069][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'. [ 894.834609][T13347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 894.860321][T13347] fuse: Bad value for 'fd' [ 895.030969][T13353] tipc: Enabled bearer , priority 1 [ 895.092696][T13366] syz.6.1551: attempt to access beyond end of device [ 895.092696][T13366] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 896.062675][T13371] syz.6.1553: attempt to access beyond end of device [ 896.062675][T13371] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 897.689833][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1556'. [ 899.585307][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1552'. [ 900.431636][T13406] loop6: detected capacity change from 0 to 1024 [ 900.443453][T13406] EXT4-fs: Mount option(s) incompatible with ext3 [ 900.668354][T13407] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 902.370479][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1566'. [ 903.966871][T13436] bridge0: port 4(ip6gretap0) entered blocking state [ 903.974235][T13436] bridge0: port 4(ip6gretap0) entered disabled state [ 903.987528][T13436] ip6gretap0: entered promiscuous mode [ 903.997033][T13436] bridge0: port 4(ip6gretap0) entered blocking state [ 904.003892][T13436] bridge0: port 4(ip6gretap0) entered forwarding state [ 904.088011][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1571'. [ 904.404359][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 904.718605][T13448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.179455][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1578'. [ 908.625332][T13473] IPVS: Unknown mcast interface: vcan0 [ 910.331906][T13490] bridge0: port 3(syz_tun) entered blocking state [ 910.339539][T13490] bridge0: port 3(syz_tun) entered disabled state [ 910.355298][T13490] syz_tun: entered promiscuous mode [ 910.362423][T13490] bridge0: port 3(syz_tun) entered blocking state [ 910.370358][T13490] bridge0: port 3(syz_tun) entered forwarding state [ 910.387135][T13490] bridge0: port 4(ip6gretap0) entered blocking state [ 910.394323][T13490] bridge0: port 4(ip6gretap0) entered disabled state [ 910.408153][T13490] ip6gretap0: entered promiscuous mode [ 910.414836][T13490] bridge0: port 4(ip6gretap0) entered blocking state [ 910.421628][T13490] bridge0: port 4(ip6gretap0) entered forwarding state [ 910.934691][T13491] loop6: detected capacity change from 0 to 64 [ 911.528916][T13496] fuse: Bad value for 'fd' [ 911.554334][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1584'. [ 914.067348][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1592'. [ 914.891204][T13527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 914.901428][T13527] fuse: Bad value for 'fd' [ 915.227300][T13533] syz.6.1591: attempt to access beyond end of device [ 915.227300][T13533] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 916.493062][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1599'. [ 916.939267][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 917.052390][T13565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1603'. [ 917.699254][T13566] netlink: 'syz.5.1604': attribute type 10 has an invalid length. [ 917.879083][T13574] fuse: Bad value for 'fd' [ 918.035956][T13577] syz.6.1606: attempt to access beyond end of device [ 918.035956][T13577] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 918.046893][T13566] team_slave_0: left allmulticast mode [ 918.719083][T13566] team0 (unregistering): Port device team_slave_0 removed [ 918.726572][T13566] team_slave_1: left allmulticast mode [ 919.087923][T13566] team0 (unregistering): Port device team_slave_1 removed [ 919.332708][T13588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 921.326417][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1615'. [ 922.105735][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1617'. [ 922.445444][T13622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 922.676724][T13624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 922.691028][T13624] fuse: Bad value for 'fd' [ 923.373958][T13636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 924.360154][T13648] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1625'. [ 925.611337][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1628'. [ 926.418683][T13662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 927.748007][T13668] loop6: detected capacity change from 0 to 512 [ 927.766113][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1631'. [ 927.791927][T13668] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 927.830219][T13668] EXT4-fs (loop6): 1 truncate cleaned up [ 927.838813][T13668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.936235][T13675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 928.928355][T11724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.229363][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1640'. [ 929.495372][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1644'. [ 929.825724][T13706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 931.099885][T13718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 931.777190][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1653'. [ 932.801206][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.807637][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.896542][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 933.668546][T13749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 933.685744][T13749] fuse: Bad value for 'fd' [ 933.849835][T13759] syz.6.1660: attempt to access beyond end of device [ 933.849835][T13759] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 934.812496][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 935.134207][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1665'. [ 937.194970][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1668'. [ 937.204236][T13790] ip6gretap0: left promiscuous mode [ 937.209667][T13790] bridge0: port 4(ip6gretap0) entered disabled state [ 937.359620][T13790] syz_tun: left promiscuous mode [ 937.365804][T13790] bridge0: port 3(syz_tun) entered disabled state [ 937.375431][T13790] bridge_slave_1: left allmulticast mode [ 937.381127][T13790] bridge_slave_1: left promiscuous mode [ 937.386940][T13790] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.396195][T13790] bridge_slave_0: left allmulticast mode [ 937.402157][T13790] bridge_slave_0: left promiscuous mode [ 937.408057][T13790] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.016601][T13802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 941.114268][T13819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 941.128682][T13819] fuse: Bad value for 'fd' [ 942.210950][T13833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 942.527628][T13830] fuse: Bad value for 'fd' [ 943.207457][T13846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 943.221747][T13846] fuse: Bad value for 'fd' [ 946.122606][T13868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 947.778449][T13883] syz.6.1691: attempt to access beyond end of device [ 947.778449][T13883] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 948.322844][T13889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 949.392459][T13902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 950.654158][T13912] tc_dump_action: action bad kind [ 954.150068][T13944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 954.351788][T13946] xt_CT: You must specify a L4 protocol and not use inversions on it [ 956.282278][T13960] kAFS: No cell specified [ 957.837135][T13989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 958.668420][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 959.310476][T14000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 959.325874][T13997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 960.849345][T14019] loop6: detected capacity change from 0 to 512 [ 960.932071][T14016] ip_tables: iptables: counters copy to user failed while replacing table [ 961.005962][T14019] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.1727: corrupted in-inode xattr: invalid ea_ino [ 961.060458][T14019] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1727: couldn't read orphan inode 15 (err -117) [ 961.081288][T14019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.372560][T14032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 961.803878][T14033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 961.814612][T14033] fuse: Bad value for 'fd' [ 962.267429][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1731'. [ 962.292080][T11724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.962260][T14055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 962.976784][T14055] fuse: Bad value for 'fd' [ 963.817087][T14068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 964.440556][T14071] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1737'. [ 965.320918][T14083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 965.341350][T14077] fuse: Bad value for 'fd' [ 965.556326][T14086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 966.744332][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1742'. [ 967.260304][T14090] SET target dimension over the limit! [ 968.300124][T14105] syz.6.1746: attempt to access beyond end of device [ 968.300124][T14105] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 969.528538][T14124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 970.716771][T14133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 971.407998][T14137] loop6: detected capacity change from 0 to 512 [ 971.433406][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1754'. [ 971.473521][T14137] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.1753: corrupted in-inode xattr: invalid ea_ino [ 971.491781][T14137] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1753: couldn't read orphan inode 15 (err -117) [ 971.507246][T14137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.203237][T11724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.592365][T14176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 975.442797][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1765'. [ 975.702022][T14190] overlayfs: failed to resolve './bus': -2 [ 976.008734][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1767'. [ 976.231331][T14196] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1768'. [ 979.326792][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1776'. [ 979.609456][T14226] overlayfs: failed to resolve './bus': -2 [ 981.546813][T14246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 981.561127][T14246] fuse: Bad value for 'fd' [ 982.282637][T14244] FAULT_INJECTION: forcing a failure. [ 982.282637][T14244] name failslab, interval 1, probability 0, space 9, times 0 [ 982.296417][T14244] CPU: 1 PID: 14244 Comm: syz.6.1781 Not tainted syzkaller #0 [ 982.303918][T14244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 982.314002][T14244] Call Trace: [ 982.317382][T14244] [ 982.320381][T14244] dump_stack_lvl+0x18c/0x250 [ 982.325248][T14244] ? show_regs_print_info+0x20/0x20 [ 982.330528][T14244] ? load_image+0x420/0x420 [ 982.335077][T14244] ? __might_sleep+0xe0/0xe0 [ 982.339731][T14244] ? __lock_acquire+0x7d80/0x7d80 [ 982.344804][T14244] should_fail_ex+0x394/0x4c0 [ 982.349548][T14244] should_failslab+0x9/0x20 [ 982.354095][T14244] slab_pre_alloc_hook+0x59/0x300 [ 982.359175][T14244] kmem_cache_alloc+0x5a/0x2c0 [ 982.363943][T14244] ? configfs_new_dirent+0x58/0x350 [ 982.369162][T14244] configfs_new_dirent+0x58/0x350 [ 982.374187][T14244] configfs_make_dirent+0x35/0x160 [ 982.379299][T14244] configfs_create_file+0xe3/0x130 [ 982.384416][T14244] configfs_attach_item+0x631/0x980 [ 982.389620][T14244] configfs_attach_group+0x2a/0x360 [ 982.394824][T14244] ? do_raw_spin_unlock+0x121/0x230 [ 982.400029][T14244] configfs_mkdir+0x72e/0x9e0 [ 982.404729][T14244] vfs_mkdir+0x2a5/0x470 [ 982.409020][T14244] do_mkdirat+0x1dc/0x450 [ 982.413374][T14244] ? vfs_mkdir+0x470/0x470 [ 982.417822][T14244] __x64_sys_mkdirat+0x89/0xa0 [ 982.422595][T14244] do_syscall_64+0x55/0xb0 [ 982.427022][T14244] ? clear_bhb_loop+0x40/0x90 [ 982.431845][T14244] ? clear_bhb_loop+0x40/0x90 [ 982.436540][T14244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 982.442438][T14244] RIP: 0033:0x7fee2159e159 [ 982.446947][T14244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.466601][T14244] RSP: 002b:00007fee22427028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 982.475018][T14244] RAX: ffffffffffffffda RBX: 00007fee21826090 RCX: 00007fee2159e159 [ 982.482988][T14244] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 982.490956][T14244] RBP: 00007fee2163506b R08: 0000000000000000 R09: 0000000000000000 [ 982.498922][T14244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.506890][T14244] R13: 00007fee21826128 R14: 00007fee21826090 R15: 00007ffeb142b948 [ 982.514877][T14244] [ 984.212652][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 984.810623][T14277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 985.033598][ C0] hrtimer: interrupt took 50487 ns [ 985.630043][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 985.742110][T14291] loop6: detected capacity change from 0 to 512 [ 985.805739][T14291] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.1790: corrupted in-inode xattr: invalid ea_ino [ 985.851372][T14291] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1790: couldn't read orphan inode 15 (err -117) [ 985.901723][T14291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.732798][T11724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.247894][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1797'. [ 988.238312][T14325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 989.281527][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 989.530532][T14331] ip_tables: iptables: counters copy to user failed while replacing table [ 989.593709][T14337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 989.607846][T14337] fuse: Bad value for 'fd' [ 989.784597][T14338] loop6: detected capacity change from 0 to 512 [ 990.146036][T14338] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.1805: corrupted in-inode xattr: invalid ea_ino [ 990.388782][T14338] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1805: couldn't read orphan inode 15 (err -117) [ 990.435012][T14338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.388683][T11724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.489078][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 991.569999][T14363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 994.113514][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.124971][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.125208][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1814'. [ 995.618235][T14385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 995.632102][T14385] fuse: Bad value for 'fd' [ 996.343346][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1818'. [ 997.262796][T14396] overlayfs: failed to resolve './bus': -2 [ 997.285053][T14403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 999.396373][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1824'. [ 999.727172][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1826'. [ 999.767995][T14424] loop6: detected capacity change from 0 to 2048 [ 1000.048690][T14424] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1003.083214][T14436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1830'. [ 1003.164532][T14444] overlayfs: failed to resolve './bus': -2 [ 1003.448116][T14451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1003.462136][T14451] fuse: Bad value for 'fd' [ 1004.454069][T14458] ucma_write: process 539 (syz.6.1833) changed security contexts after opening file descriptor, this is not allowed. [ 1007.585822][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1842'. [ 1011.477292][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1847'. [ 1013.260949][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1852'. [ 1013.702754][T14539] overlayfs: failed to resolve './bus': -2 [ 1014.244141][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 1015.799573][T14565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1017.781521][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'. [ 1018.829591][T14584] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1019.288890][T14591] overlayfs: failed to resolve './bus': -2 [ 1020.609425][T14602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1020.819043][T14604] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1021.723292][T14620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1023.064033][T14613] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1023.956261][T14635] SET target dimension over the limit! [ 1024.034321][T14644] overlayfs: failed to resolve './bus': -2 [ 1025.457338][T14656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1025.465911][T14653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1025.475672][T14654] fuse: Bad value for 'fd' [ 1028.624440][T14687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1028.810963][T14689] overlayfs: failed to resolve './bus': -2 [ 1029.549616][T14695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1030.472921][T14703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1030.902566][T14704] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1032.379325][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'. [ 1032.651535][T14728] overlayfs: failed to resolve './bus': -2 [ 1034.170507][T14742] xt_hashlimit: size too large, truncated to 1048576 [ 1037.107268][T14755] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1038.740040][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1909'. [ 1039.244238][T14778] overlayfs: failed to resolve './bus': -2 [ 1040.900845][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1911'. [ 1041.392319][T14793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1042.308963][T14805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1042.324091][T14805] fuse: Bad value for 'fd' [ 1043.014099][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'. [ 1043.883331][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 1044.965900][T14828] overlayfs: failed to resolve './bus': -2 [ 1045.532067][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1923'. [ 1045.759102][T14841] syz.6.1925: attempt to access beyond end of device [ 1045.759102][T14841] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1049.190828][T14871] loop6: detected capacity change from 0 to 512 [ 1049.231014][T14871] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.1933: corrupted in-inode xattr: invalid ea_ino [ 1049.309655][T14871] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1933: couldn't read orphan inode 15 (err -117) [ 1049.357132][T14871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.181995][T11724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.308516][T14879] syz.6.1936: attempt to access beyond end of device [ 1050.308516][T14879] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1052.521835][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1052.521852][ T27] audit: type=1326 audit(1790981416.877:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.6.1940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2159e159 code=0x7ffc0000 [ 1052.567243][ T27] audit: type=1326 audit(1790981416.877:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.6.1940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2159e159 code=0x7ffc0000 [ 1052.603638][ T27] audit: type=1326 audit(1790981416.877:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.6.1940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fee2159e159 code=0x7ffc0000 [ 1052.796679][ T27] audit: type=1326 audit(1790981416.877:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.6.1940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2159e159 code=0x7ffc0000 [ 1052.863658][ T27] audit: type=1326 audit(1790981416.877:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.6.1940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2159e159 code=0x7ffc0000 [ 1052.923396][ T27] audit: type=1326 audit(1790981416.887:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.6.1940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fee2159e159 code=0x7ffc0000 [ 1052.980078][ T27] audit: type=1326 audit(1790981416.897:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.6.1940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2159e159 code=0x7ffc0000 [ 1053.019379][ T27] audit: type=1326 audit(1790981416.897:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.6.1940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2159e159 code=0x7ffc0000 [ 1053.044579][ T27] audit: type=1326 audit(1790981416.897:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.6.1940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee2155e98e code=0x7ffc0000 [ 1053.074619][ T27] audit: type=1326 audit(1790981416.897:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.6.1940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee2159ddeb code=0x7ffc0000 [ 1053.165933][T14907] netlink: 'syz.5.1942': attribute type 1 has an invalid length. [ 1053.178907][T14907] netlink: 'syz.5.1942': attribute type 2 has an invalid length. [ 1054.937099][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.944085][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.891715][T14923] overlayfs: failed to resolve './bus': -2 [ 1057.693906][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1950'. [ 1060.038470][T14972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1060.250227][T14974] overlayfs: failed to resolve './bus': -2 [ 1063.526204][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'. [ 1063.593770][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1964'. [ 1064.377236][T15008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1065.193624][T15018] overlayfs: failed to resolve './bus': -2 [ 1066.821065][T15030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1067.458109][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1973'. [ 1067.664365][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1974'. [ 1067.712250][T15040] bridge0: port 4(ip6gretap0) entered disabled state [ 1067.719261][T15040] bridge0: port 3(syz_tun) entered disabled state [ 1067.725959][T15040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.733199][T15040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.774360][T15040] bridge0: left allmulticast mode [ 1070.327927][T15058] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 1072.381628][T15071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1072.395429][T15071] fuse: Bad value for 'fd' [ 1073.471921][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1073.514573][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1073.523890][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1073.533468][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1073.547115][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1073.559841][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1073.659305][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.708406][T15078] lo speed is unknown, defaulting to 1000 [ 1073.760869][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.687289][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.459870][T15100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1075.469737][T15100] fuse: Bad value for 'fd' [ 1075.656123][ T51] Bluetooth: hci2: command tx timeout [ 1075.722212][T15078] chnl_net:caif_netlink_parms(): no params data found [ 1075.869895][T15078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.889931][T15078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.909337][T15078] bridge_slave_0: entered allmulticast mode [ 1075.922136][T15078] bridge_slave_0: entered promiscuous mode [ 1076.118550][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.007164][T15078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.136902][T15078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.147745][T15078] bridge_slave_1: entered allmulticast mode [ 1077.163243][T15078] bridge_slave_1: entered promiscuous mode [ 1077.292779][T15116] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1991'. [ 1077.448336][T15078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.462627][T15078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.510391][T15078] team0: Port device team_slave_0 added [ 1077.538708][T15078] team0: Port device team_slave_1 added [ 1077.577941][T15078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.585030][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.611327][T15078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.624802][T15078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.632041][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.659655][T15078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.742588][T15078] hsr_slave_0: entered promiscuous mode [ 1077.763928][T15078] hsr_slave_1: entered promiscuous mode [ 1077.770502][ T51] Bluetooth: hci2: command tx timeout [ 1077.783495][T15078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1077.791789][T15078] Cannot create hsr debugfs directory [ 1078.121081][T15078] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1078.132115][T15078] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1078.185984][T15078] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1078.202457][T15078] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1078.387377][T15078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.443109][T15078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.461553][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.468763][ T8652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.479217][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.486587][ T8652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.889489][ T11] hsr_slave_0: left promiscuous mode [ 1078.915753][ T11] hsr_slave_1: left promiscuous mode [ 1078.923468][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.948088][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.965861][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.973317][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.006409][ T11] geneve0: left promiscuous mode [ 1079.012677][ T11] veth1_macvtap: left promiscuous mode [ 1079.019829][ T11] veth0_macvtap: left promiscuous mode [ 1079.025940][ T11] veth1_vlan: left promiscuous mode [ 1079.031280][ T11] veth0_vlan: left promiscuous mode [ 1079.794237][ T11] team_slave_1 (unregistering): left allmulticast mode [ 1079.810864][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1079.818985][ T51] Bluetooth: hci2: command tx timeout [ 1079.867119][ T11] team_slave_0 (unregistering): left allmulticast mode [ 1079.877203][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1079.933330][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.942702][ T11] bond_slave_1 (unregistering): left allmulticast mode [ 1079.996775][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.006447][ T11] bond_slave_0 (unregistering): left allmulticast mode [ 1080.401021][ T11] bond0 (unregistering): Released all slaves [ 1080.507010][T15078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.973368][T15078] veth0_vlan: entered promiscuous mode [ 1080.998605][T15078] veth1_vlan: entered promiscuous mode [ 1081.057031][T15078] veth0_macvtap: entered promiscuous mode [ 1081.070416][T15078] veth1_macvtap: entered promiscuous mode [ 1081.098517][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.111643][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.125778][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.137871][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.150004][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.164645][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.187865][T15078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.203475][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.214311][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.227082][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.237842][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.247761][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.260510][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.271828][T15078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.304668][T15078] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.313420][T15078] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.323046][T15078] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.332040][T15078] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.431455][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.447027][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.511003][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.533393][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.894515][ T51] Bluetooth: hci2: command tx timeout [ 1082.597810][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1985'. [ 1082.610059][T15194] macsec0: entered promiscuous mode [ 1082.941127][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2005'. [ 1084.314708][T15223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1085.998239][T15239] overlayfs: failed to resolve './bus': -2 [ 1087.176822][T15245] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2004'. [ 1088.060506][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 1088.306535][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'. [ 1088.624768][T15269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1089.532842][T15279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1089.546891][T15279] fuse: Bad value for 'fd' [ 1090.937114][T15288] overlayfs: failed to resolve './bus': -2 [ 1092.246670][T15299] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1092.256723][T15299] fuse: Bad value for 'fd' [ 1092.593026][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 1092.787106][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2024'. [ 1095.646367][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2031'. [ 1095.721180][T15348] overlayfs: failed to resolve './bus': -2 [ 1096.101872][T15346] Cannot find del_set index 4 as target [ 1096.426583][T15358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1097.918862][T15381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1097.960791][T15381] fuse: Bad value for 'fd' [ 1100.672142][T15404] overlayfs: failed to resolve './bus': -2 [ 1100.847198][T15406] dns_resolver: Unsupported content type (6) [ 1101.393419][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2045'. [ 1102.759857][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2050'. [ 1104.194527][T15444] loop7: detected capacity change from 0 to 128 [ 1104.265208][T15444] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1104.341786][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 1106.074900][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2061'. [ 1106.269286][T15487] kAFS: unable to lookup cell 'Þ({^ú@' [ 1107.880855][T15499] bond0: (slave bond_slave_0): Releasing backup interface [ 1107.915397][T15499] bond_slave_0: left allmulticast mode [ 1108.728656][T15510] trusted_key: syz.2.2066 sent an empty control message without MSG_MORE. [ 1108.831689][T15499] bond0: (slave bond_slave_1): Releasing backup interface [ 1108.935188][T15499] bond_slave_1: left allmulticast mode [ 1108.988837][T15499] team_slave_0: left allmulticast mode [ 1109.082216][T15499] team0: Port device team_slave_0 removed [ 1109.091309][T15499] team_slave_1: left allmulticast mode [ 1109.116461][T15499] team0: Port device team_slave_1 removed [ 1109.141964][T15499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.153840][T15499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.205800][T15499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.216347][T15499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.330800][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2067'. [ 1109.379421][T15512] team0: Mode changed to "loadbalance" [ 1109.518966][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2071'. [ 1109.870924][T15543] No such timeout policy "syz1" [ 1110.930927][T15543] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1111.087165][T15543] syz.7.2073 (15543) used greatest stack depth: 19592 bytes left [ 1111.214983][T15554] fuse: Bad value for 'fd' [ 1111.878245][T13124] IPVS: starting estimator thread 0... [ 1111.914488][T15557] tipc: Started in network mode [ 1111.975019][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1111.975035][ T27] audit: type=1326 audit(1790981476.327:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.7.2077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4699e159 code=0x7ffc0000 [ 1112.039892][T15557] tipc: Node identity ac1414aa, cluster identity 4711 [ 1112.054171][T15557] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1112.061856][T15557] tipc: Enabled bearer , priority 10 [ 1112.077686][ T27] audit: type=1326 audit(1790981476.367:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.7.2077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4699e159 code=0x7ffc0000 [ 1112.103961][T15562] IPVS: using max 19 ests per chain, 45600 per kthread [ 1112.105444][ T27] audit: type=1326 audit(1790981476.377:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.7.2077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4699e159 code=0x7ffc0000 [ 1112.143638][ T27] audit: type=1326 audit(1790981476.377:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.7.2077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4699e159 code=0x7ffc0000 [ 1112.203798][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1112.275365][T15574] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 1112.353675][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1112.363818][ T27] audit: type=1326 audit(1790981476.377:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.7.2077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f9b4699e159 code=0x7ffc0000 [ 1112.493740][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1112.529638][ T27] audit: type=1326 audit(1790981476.377:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.7.2077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4699e159 code=0x7ffc0000 [ 1112.643734][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1112.767281][ T27] audit: type=1326 audit(1790981476.377:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.7.2077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4699e159 code=0x7ffc0000 [ 1112.791937][ T27] audit: type=1326 audit(1790981476.377:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.7.2077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4699e159 code=0x7ffc0000 [ 1112.793834][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1112.845724][ T27] audit: type=1326 audit(1790981476.377:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.7.2077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4699e159 code=0x7ffc0000 [ 1112.870888][ T27] audit: type=1326 audit(1790981476.377:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.7.2077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b4699e159 code=0x7ffc0000 [ 1112.923886][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1112.990308][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 1113.070138][ T2182] tipc: Node number set to 2886997162 [ 1113.203711][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1113.473756][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1114.038969][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2083'. [ 1114.132289][T15602] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 1114.208924][T15602] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2086'. [ 1114.991871][T15613] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 1115.285143][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2092'. [ 1115.352406][T15625] sctp: [Deprecated]: syz.7.2093 (pid 15625) Use of int in max_burst socket option. [ 1115.352406][T15625] Use struct sctp_assoc_value instead [ 1115.398934][T15625] sctp: [Deprecated]: syz.7.2093 (pid 15625) Use of int in maxseg socket option. [ 1115.398934][T15625] Use struct sctp_assoc_value instead [ 1115.535848][T15632] ªªªªªª: renamed from vlan0 (while UP) [ 1115.633961][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'. [ 1116.053703][ C0] net_ratelimit: 2 callbacks suppressed [ 1116.053812][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1116.816920][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.823296][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.093694][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1118.133687][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1118.414647][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 1118.647123][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 1118.657561][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1118.664964][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1118.675039][ T51] Workqueue: hci2 hci_rx_work [ 1118.679856][ T51] Call Trace: [ 1118.683132][ T51] [ 1118.686060][ T51] dump_stack_lvl+0x18c/0x250 [ 1118.690754][ T51] ? show_regs_print_info+0x20/0x20 [ 1118.695956][ T51] ? load_image+0x420/0x420 [ 1118.700484][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 1118.705602][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 1118.710628][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 1118.715306][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 1118.720510][ T51] kobject_add_internal+0x617/0xc90 [ 1118.725745][ T51] kobject_add+0x164/0x240 [ 1118.730162][ T51] ? kobject_init+0x1d0/0x1d0 [ 1118.734836][ T51] ? _raw_spin_unlock+0x28/0x40 [ 1118.739804][ T51] ? get_device_parent+0x366/0x390 [ 1118.744950][ T51] device_add+0x3fa/0xc40 [ 1118.749286][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 1118.754303][ T51] hci_sync_conn_complete_evt+0x6d6/0x9a0 [ 1118.760054][ T51] ? hci_remote_ext_features_evt+0xa80/0xa80 [ 1118.766034][ T51] hci_event_packet+0x807/0x1280 [ 1118.770970][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 1118.775995][ T51] ? lock_chain_count+0x20/0x20 [ 1118.780844][ T51] ? bis_list+0x290/0x290 [ 1118.785175][ T51] ? kcov_remote_start+0x513/0x810 [ 1118.790312][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 1118.795560][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 1118.800774][ T51] hci_rx_work+0x43a/0xd60 [ 1118.805205][ T51] ? process_scheduled_works+0x975/0x1600 [ 1118.810930][ T51] process_scheduled_works+0xa60/0x1600 [ 1118.816496][ T51] ? worker_attach_to_pool+0x370/0x370 [ 1118.821961][ T51] ? assign_work+0x3cc/0x5d0 [ 1118.826558][ T51] worker_thread+0xa5e/0xfe0 [ 1118.831176][ T51] kthread+0x2fa/0x390 [ 1118.835242][ T51] ? pr_cont_work+0x550/0x550 [ 1118.839923][ T51] ? kthread_blkcg+0xd0/0xd0 [ 1118.844510][ T51] ret_from_fork+0x48/0x80 [ 1118.848968][ T51] ? kthread_blkcg+0xd0/0xd0 [ 1118.853560][ T51] ret_from_fork_asm+0x11/0x20 [ 1118.858362][ T51] [ 1118.892685][ T51] kobject: kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 1118.907445][ T51] Bluetooth: hci2: failed to register connection device [ 1119.020468][T15696] macvlan0: entered promiscuous mode [ 1119.026290][T15696] netlink: 'syz.4.2106': attribute type 1 has an invalid length. [ 1119.034774][T15696] netlink: 'syz.4.2106': attribute type 2 has an invalid length. [ 1119.075103][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2107'. [ 1119.136446][T15696] lo speed is unknown, defaulting to 1000 [ 1119.183697][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1119.450105][T15712] overlayfs: failed to clone upperpath [ 1119.647930][T15712] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2110'. [ 1119.731349][T15724] fuse: Bad value for 'fd' [ 1120.213731][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1120.405842][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2112'. [ 1120.462526][T15720] siw: device registration error -23 [ 1120.614842][ T51] Bluetooth: hci2: command tx timeout [ 1120.781841][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2117'. [ 1120.910836][T15703] udevd[15703]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1120.977074][T15747] siw: device registration error -23 [ 1120.986835][T15747] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2120'. [ 1121.253668][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1121.411045][T15756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1121.421670][T15756] fuse: Bad value for 'fd' [ 1121.900991][T15755] mmap: syz.2.2121 (15755): VmData 49479680 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 1122.293695][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1122.427824][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2123'. [ 1122.618026][T15770] lo speed is unknown, defaulting to 1000 [ 1122.675971][T15774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1122.700796][T15770] lo speed is unknown, defaulting to 1000 [ 1122.913421][T15770] lo speed is unknown, defaulting to 1000 [ 1123.246334][T15770] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 1123.343702][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1123.384479][T15770] lo speed is unknown, defaulting to 1000 [ 1123.512239][T15770] lo speed is unknown, defaulting to 1000 [ 1123.603053][T15770] lo speed is unknown, defaulting to 1000 [ 1123.658086][T15786] overlayfs: failed to resolve './bus': -2 [ 1123.732509][T15770] lo speed is unknown, defaulting to 1000 [ 1123.853032][T15794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1124.373839][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1125.126838][T15807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1125.420879][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 1125.429908][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1125.695181][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2135'. [ 1126.032855][T15826] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1126.463731][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1127.503649][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1128.533676][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1128.776682][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2142'. [ 1128.811379][T15845] overlayfs: failed to resolve './bus': -2 [ 1129.403994][T15861] overlayfs: failed to resolve './bus': -2 [ 1129.573774][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1130.391689][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'. [ 1130.591740][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2143'. [ 1130.621547][ T789] Process accounting resumed [ 1130.623675][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1130.648366][T15881] netlink: 'syz.2.2149': attribute type 10 has an invalid length. [ 1130.657489][T15881] dummy0: left allmulticast mode [ 1130.665865][T15881] dummy0: entered allmulticast mode [ 1130.671232][T15881] dummy0: entered promiscuous mode [ 1130.677425][T15881] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1130.893032][T15886] netlink: 'syz.7.2151': attribute type 3 has an invalid length. [ 1131.452502][T15897] syz_tun: left promiscuous mode [ 1131.471682][T15897] bridge0: port 3(syz_tun) entered disabled state [ 1131.492573][T15897] ip6gretap0: left promiscuous mode [ 1131.505411][T15897] bridge0: port 4(ip6gretap0) entered disabled state [ 1131.519415][T15897] bond0: (slave dummy0): Releasing backup interface [ 1131.529698][T15897] dummy0: left allmulticast mode [ 1131.535030][T15897] dummy0: left promiscuous mode [ 1131.653699][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1132.401955][T15897] bridge_slave_0: left allmulticast mode [ 1132.413827][T15897] bridge_slave_0: left promiscuous mode [ 1132.425091][T15897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.438402][T15897] bridge_slave_1: left allmulticast mode [ 1132.451577][T15897] bridge_slave_1: left promiscuous mode [ 1132.471319][T15897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.489819][T15897] bond0: (slave bond_slave_0): Releasing backup interface [ 1132.515231][T15897] bond_slave_0: left allmulticast mode [ 1132.521806][T15897] bond_slave_0: left promiscuous mode [ 1132.544114][T15897] bond0: (slave bond_slave_1): Releasing backup interface [ 1132.559284][T15897] bond_slave_1: left allmulticast mode [ 1132.567206][T15897] bond_slave_1: left promiscuous mode [ 1132.581491][T15897] team_slave_0: left allmulticast mode [ 1132.629367][T15897] team0: Port device team_slave_0 removed [ 1132.638968][T15897] team_slave_1: left allmulticast mode [ 1132.652911][T15897] team0: Port device team_slave_1 removed [ 1132.661932][T15897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.672122][T15897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.687205][T15897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.694791][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1132.706899][T15897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.740833][T15897] bond1: left allmulticast mode [ 1132.747314][T15897] ip6gretap1: left allmulticast mode [ 1132.752909][T15897] bond1: left promiscuous mode [ 1132.762981][T15897] ip6gretap1: left promiscuous mode [ 1132.788685][T15897] team0: Port device macvlan2 removed [ 1132.798396][T15897] bond1: (slave ip6gretap1): Releasing active interface [ 1132.810990][T15897] bond2: (slave macvlan3): Releasing active interface [ 1132.838085][T15896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2154'. [ 1132.858631][T15905] lo speed is unknown, defaulting to 1000 [ 1132.866593][T15905] lo speed is unknown, defaulting to 1000 [ 1132.941819][T15909] team0: Mode changed to "loadbalance" [ 1133.068432][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2158'. [ 1133.733779][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1134.413473][ T5789] [ 1134.415851][ T5789] ====================================================== [ 1134.422882][ T5789] WARNING: possible circular locking dependency detected [ 1134.429912][ T5789] syzkaller #0 Not tainted [ 1134.434307][ T5789] ------------------------------------------------------ [ 1134.441313][ T5789] kworker/u5:5/5789 is trying to acquire lock: [ 1134.447445][ T5789] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550 [ 1134.456770][ T5789] [ 1134.456770][ T5789] but task is already holding lock: [ 1134.464148][ T5789] ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 1134.473451][ T5789] [ 1134.473451][ T5789] which lock already depends on the new lock. [ 1134.473451][ T5789] [ 1134.483858][ T5789] [ 1134.483858][ T5789] the existing dependency chain (in reverse order) is: [ 1134.492969][ T5789] [ 1134.492969][ T5789] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 1134.500697][ T5789] __mutex_lock+0x135/0xc80 [ 1134.505717][ T5789] hci_remote_features_evt+0x535/0x900 [ 1134.511689][ T5789] hci_event_packet+0x807/0x1280 [ 1134.517142][ T5789] hci_rx_work+0x43a/0xd60 [ 1134.522065][ T5789] process_scheduled_works+0xa60/0x1600 [ 1134.528122][ T5789] worker_thread+0xa5e/0xfe0 [ 1134.533226][ T5789] kthread+0x2fa/0x390 [ 1134.537798][ T5789] ret_from_fork+0x48/0x80 [ 1134.542722][ T5789] ret_from_fork_asm+0x11/0x20 [ 1134.547996][ T5789] [ 1134.547996][ T5789] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 1134.555273][ T5789] __mutex_lock+0x135/0xc80 [ 1134.560281][ T5789] l2cap_chan_connect+0xfc/0xe30 [ 1134.565802][ T5789] l2cap_sock_connect+0x586/0x760 [ 1134.571334][ T5789] kernel_connect+0x142/0x1c0 [ 1134.576614][ T5789] rfcomm_dlc_open+0xa1f/0xec0 [ 1134.581886][ T5789] rfcomm_sock_connect+0x2ed/0x600 [ 1134.587583][ T5789] __sys_connect+0x3da/0x470 [ 1134.592718][ T5789] __x64_sys_connect+0x7a/0x90 [ 1134.597988][ T5789] do_syscall_64+0x55/0xb0 [ 1134.602913][ T5789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.609321][ T5789] [ 1134.609321][ T5789] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 1134.616712][ T5789] __lock_acquire+0x37ef/0x7d80 [ 1134.622100][ T5789] lock_acquire+0x19e/0x420 [ 1134.627113][ T5789] __mutex_lock+0x135/0xc80 [ 1134.632120][ T5789] rfcomm_security_cfm+0x41/0x550 [ 1134.637653][ T5789] hci_encrypt_cfm+0x363/0x4d0 [ 1134.642927][ T5789] hci_cc_read_enc_key_size+0x219/0x380 [ 1134.648980][ T5789] hci_cmd_complete_evt+0x4e7/0xa40 [ 1134.654684][ T5789] hci_event_packet+0x7b4/0x1280 [ 1134.660125][ T5789] hci_rx_work+0x43a/0xd60 [ 1134.665069][ T5789] process_scheduled_works+0xa60/0x1600 [ 1134.671135][ T5789] worker_thread+0xa5e/0xfe0 [ 1134.676234][ T5789] kthread+0x2fa/0x390 [ 1134.680809][ T5789] ret_from_fork+0x48/0x80 [ 1134.685733][ T5789] ret_from_fork_asm+0x11/0x20 [ 1134.691008][ T5789] [ 1134.691008][ T5789] other info that might help us debug this: [ 1134.691008][ T5789] [ 1134.701223][ T5789] Chain exists of: [ 1134.701223][ T5789] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 1134.701223][ T5789] [ 1134.713717][ T5789] Possible unsafe locking scenario: [ 1134.713717][ T5789] [ 1134.721148][ T5789] CPU0 CPU1 [ 1134.726492][ T5789] ---- ---- [ 1134.731834][ T5789] lock(hci_cb_list_lock); [ 1134.736317][ T5789] lock(&hdev->lock); [ 1134.742888][ T5789] lock(hci_cb_list_lock); [ 1134.749914][ T5789] lock(rfcomm_mutex); [ 1134.754062][ T5789] [ 1134.754062][ T5789] *** DEADLOCK *** [ 1134.754062][ T5789] [ 1134.762185][ T5789] 4 locks held by kworker/u5:5/5789: [ 1134.767446][ T5789] #0: ffff88805a5cc538 ((wq_completion)hci2#3){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1134.778393][ T5789] #1: ffffc90004677d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1134.790375][ T5789] #2: ffff888065a540b8 (&hdev->lock){+.+.}-{3:3}, at: hci_cc_read_enc_key_size+0x9c/0x380 [ 1134.800355][ T5789] #3: ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 1134.803684][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1134.810065][ T5789] [ 1134.810065][ T5789] stack backtrace: [ 1134.810073][ T5789] CPU: 1 PID: 5789 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1134.830400][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1134.840442][ T5789] Workqueue: hci2 hci_rx_work [ 1134.845111][ T5789] Call Trace: [ 1134.848377][ T5789] [ 1134.851289][ T5789] dump_stack_lvl+0x18c/0x250 [ 1134.855983][ T5789] ? load_image+0x420/0x420 [ 1134.860489][ T5789] ? show_regs_print_info+0x20/0x20 [ 1134.865687][ T5789] ? print_circular_bug+0x12b/0x1a0 [ 1134.870875][ T5789] check_noncircular+0x2fc/0x400 [ 1134.875823][ T5789] ? print_deadlock_bug+0x5d0/0x5d0 [ 1134.881009][ T5789] ? lockdep_lock+0xf5/0x230 [ 1134.885587][ T5789] ? rcu_read_lock_sched_held+0x8a/0x110 [ 1134.891202][ T5789] ? _find_first_zero_bit+0xd6/0x100 [ 1134.896468][ T5789] __lock_acquire+0x37ef/0x7d80 [ 1134.901304][ T5789] ? verify_lock_unused+0x140/0x140 [ 1134.906505][ T5789] ? l2cap_security_cfm+0x1277/0x1300 [ 1134.911857][ T5789] ? __lock_acquire+0x7d80/0x7d80 [ 1134.916863][ T5789] ? rcu_is_watching+0x15/0xb0 [ 1134.921613][ T5789] lock_acquire+0x19e/0x420 [ 1134.926098][ T5789] ? rfcomm_security_cfm+0x41/0x550 [ 1134.931275][ T5789] ? __might_sleep+0xe0/0xe0 [ 1134.935848][ T5789] ? read_lock_is_recursive+0x20/0x20 [ 1134.941200][ T5789] ? __mutex_trylock_common+0x160/0x270 [ 1134.946725][ T5789] __mutex_lock+0x135/0xc80 [ 1134.951207][ T5789] ? rfcomm_security_cfm+0x41/0x550 [ 1134.956394][ T5789] ? __mutex_lock+0x30d/0xc80 [ 1134.961051][ T5789] ? rfcomm_security_cfm+0x41/0x550 [ 1134.966259][ T5789] ? l2cap_disconn_cfm+0xc0/0xc0 [ 1134.971197][ T5789] ? mutex_lock_nested+0x20/0x20 [ 1134.976124][ T5789] ? hci_encrypt_cfm+0x2fe/0x4d0 [ 1134.981051][ T5789] ? mutex_lock_nested+0x20/0x20 [ 1134.985971][ T5789] ? hci_conn_hash_lookup_handle+0x20/0x240 [ 1134.991899][ T5789] ? __lock_acquire+0x7d80/0x7d80 [ 1134.996911][ T5789] rfcomm_security_cfm+0x41/0x550 [ 1135.001916][ T5789] ? trace_contention_end+0x39/0xe0 [ 1135.007119][ T5789] ? hci_conn_hash_lookup_handle+0x20/0x240 [ 1135.012992][ T5789] ? rfcomm_send_msc+0x360/0x360 [ 1135.017912][ T5789] hci_encrypt_cfm+0x363/0x4d0 [ 1135.022659][ T5789] hci_cc_read_enc_key_size+0x219/0x380 [ 1135.028189][ T5789] hci_cmd_complete_evt+0x4e7/0xa40 [ 1135.033389][ T5789] ? hci_remote_features_evt+0x900/0x900 [ 1135.039002][ T5789] hci_event_packet+0x7b4/0x1280 [ 1135.043919][ T5789] ? __lock_acquire+0x7d80/0x7d80 [ 1135.048924][ T5789] ? lock_chain_count+0x20/0x20 [ 1135.053772][ T5789] ? bis_list+0x290/0x290 [ 1135.058108][ T5789] ? kcov_remote_start+0x513/0x810 [ 1135.063211][ T5789] ? lockdep_hardirqs_on+0x98/0x150 [ 1135.068396][ T5789] ? hci_send_to_monitor+0xd7/0x4f0 [ 1135.073604][ T5789] hci_rx_work+0x43a/0xd60 [ 1135.078007][ T5789] ? process_scheduled_works+0x975/0x1600 [ 1135.083712][ T5789] process_scheduled_works+0xa60/0x1600 [ 1135.089253][ T5789] ? worker_attach_to_pool+0x370/0x370 [ 1135.094696][ T5789] ? assign_work+0x3cc/0x5d0 [ 1135.099268][ T5789] worker_thread+0xa5e/0xfe0 [ 1135.103851][ T5789] kthread+0x2fa/0x390 [ 1135.107896][ T5789] ? pr_cont_work+0x550/0x550 [ 1135.112580][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 1135.117153][ T5789] ret_from_fork+0x48/0x80 [ 1135.121564][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 1135.126137][ T5789] ret_from_fork_asm+0x11/0x20 [ 1135.130892][ T5789] [ 1135.813737][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1136.853936][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1137.903639][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1138.933657][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1139.973635][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1141.013638][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1142.053657][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1143.093717][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1144.143651][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available